Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to block or remove ads (graphical as well as textual like Google text ads) on the level of the router? I have a Cisco Linksys WRT54GL with Tomato Firmware v1.28.1816.

Basically I want a functionality as implemented by the AdBlock Lite add-on for Firefox, or Privoxy, but not on the level of the browser or individual computer, but on the level of the router.

The motivation is, there are several devices (laptops, PS3, PSP...) connected via one router to the internet. And I want one point to block the ads.

share|improve this question
Interesting idea, but I'm afraid your router and the firmware don't go that up on the IP stack. This looks like the application level. – user127350 Jul 26 '12 at 12:07
Not sure about Tomato, but you can run Privoxy in DD-WRT Kong Mod. Alternatively, with any firmware you could modify the hosts file, but I won't recommend that. – lupincho Jul 26 '12 at 12:26
up vote 11 down vote accepted

Lucky for you lifehacker have an article on how to do exactly this.

  1. Open the Tomato Admin Scripts interface You'll need to login with the user name and password you set in your instructions for installing Tomato. Once you're logged in, make sure to click on the WAN Up tab.

  2. Copy the ad-block script to Tomato. I'd recommend going directly to the source, since the author of the script updates it regularly.

You should paste the script into the blank text area in the WAN Up tab

3 . Save the script by clicking the Save button.

4.Reboot your router to enable the script. That's all there is to it. Next time you visit a web site, you should notice a conspicuous lack of ads. The same should be true from any computer, as long as it's connected to your Tomato router. There are some unfortunate bits and pieces about this method versus the Adblock extension that you might want to take into consideration before setting it up on your router. First, if you want to whitelist a site, you have to manually edit the script by changing the following section:

## remove/whitelist websites ## removes 3 websites (,, ## remove the # and edit the website urls. sed -i -e '/' $GENFILE

...replacing with the site you wanted to whitelist. Keep in mind that whitelisting does not work for whitelisting all ads on a specific site—instead, if you're having trouble opening a site you want to look at because it's on a blacklist, whitelisting that site will let you access that one specific site.

Unfortunately the script doesn't allow you to whitelist all ads on specific sites.

share|improve this answer
Can you write a summary of the link in your answer? should the link go dead, your answer would be made useless, but if you summarize the context of the link, the general idea of what you are trying to convey will always remain. – MaQleod Jul 26 '12 at 16:29
I like this method very much. One problem I see though, this can not block Google text ads or similar, can it? I find the text ads actually more intrusive than the graphical ones... – gojira Jul 28 '12 at 5:24

What you want to use is OpenDNS. Then you can set the DNS settings of your router or computers to point to their DNS. A small utility on any computer can update the IP address if it changes every few weeks, but if it's static all the better. They have an account settings section where you can block things. You just need to search the web for a black list of things to block (ad networks). You might find one by searching for a hosts file for this purpose.

share|improve this answer
I love and use OpenDNS, but OP and I are looking for AdBlock type rule-based internet filtering at the router level. – Baodad Mar 8 '14 at 22:55

In order to achieve your goal you need something with a little more intelligence. In my home I run an a piece of software called Untangle. Its a Debian Linux distribution that has a full featured web interface for controlling the software.

Untangle runs on a standard x86/x64 based computer that has 2 network cards in it. You need one for the Internet traffic (WAN) and one for your network traffic (LAN).

There are many modules included for free with Untangle including an Ad Blocker that is actually based on the code from Firefox's AdBlock Plus add-on.

Some of the other free modules include:

  • Spam Filter
  • Spyware Blocker
  • Virus Blocker (Based on Clam AV)
  • Website Blocker
  • VPN (based on OpenVPN)
  • etc...

They also offer a handful of premium apps which have costs associated with them, this was mainly for business users but you may find some of them useful like the enhanced Virus Blocker which is NOT based on Clam AV.

Untangle has the ability to act as a router or a pass through (bridge) device which can sit in-line with your network and allow you to run it without replacing your current router.

share|improve this answer
I might have to experiment with that at some point. Is there a considerable performance slowdown? what sort of hardware would I need to use? – VBwhatnow Jul 26 '12 at 14:44
The original version (5.x) could run on an 800mhz P3 and 512MB of RAM. The current releases (9.x) require a dual core and 2GB of memory for a small box. The question is a little hard to pin down. It mainly has to do with scale you are running at. Think of it like this, more users = more power. For some recomendations check out My current box is running on an Intel Core2 E6750 with 4GB of ram, but that is because it was a spare box I had. Also higher quality NICs will make a huge difference on performnce. – ianc1215 Jul 26 '12 at 14:56
Interesting, thanks. – VBwhatnow Jul 26 '12 at 14:57

I set up access restriction list. It is a bit draconian, but it works and i can decide which devices it applies to. It is easy enough to disable by logging in. But, you have to enter sites manually. I have to use two lists because my list is large.

There are many many more, but thats all i could post

share|improve this answer – J. Honak May 4 '15 at 23:54
There are many many more, but thats all i could post – J. Honak May 4 '15 at 23:55
You can block the entire domain or a specific dns name – J. Honak May 4 '15 at 23:56
Can you say a bit more about how to do this? – G-Man May 5 '15 at 1:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .